So no fix for 10010 ? I mean I restart PC and clean logs after fixing that last one these are fresh logs.

Not all event log errors have ready made fixes. It's probably a Cortana issue or OneDrive issue....vary hard to tell. Some part of the system, or a user app, is trying to connect with some server, or pseudo server, and did not within the pre-allocated time. There are retries built into just about all the services, but the connection failed for some reason, so the OS logged it. If there were ready fixes for all errors that pop up, there wouldn't be any errors.

My ComputersYou need to have JavaScript enabled so that you can use this ...

There are numerous posts in TenForums and Microsoft forums on how to fix these errors.
All solutions provide instructions on how to change the owner of the CLSID & APPID registry keys to the Administrators group, in order to activate the security settings of the respective DCOM component, so you can provide the problematic user (usually NT AUTHORITY\SYSTEM) with Local Activation privileges.

Having spent quite some time in solving these 10016 errors, I have come up with the following solution:
1. In order to avoid all the steps to activate the DCOM component’s Security settings messing up with the registry, download the excellent utility PowerRun, with which you can run any program with TrustedInstaller privileges.
2. Once downloaded (there is no need for installation, it’s a standalone program) use either PowerRun_x64.exe or PowerRun.exe, depending on your Windows 10 (x64 or x86). From within the program, press the + icon and add the Component Services “%windir%\System32\DCOMcnfg.exe”.
3. Browse to Console Root > Component Services > Computers > My Computer > DCOM Config
4. Find the problematic component, searching either by its DCOM name or by its AppID
5. Right click on it and select “Properties”
6. Navigate to the “Security” tab and click the “Edit” button in the “Launch and Activation Permissions” section
7. In the newly opened dialogue box (Launch and Activation Permission), if “SYSTEM” is missing from the “Group or user names” list section, proceed to #8, otherwise skip to #11
8. Click the “Add” button
9. Type in “SYSTEM”, that is the User as found per Event ID 10016 from Event Viewer, and click on “Check Names” button (it will convert the name to the correct format)
10. Click the “OK” button. You're back in “Launch and Activation Permission” dialogue box
11. Select “SYSTEM” from the “Group or user names” list, and click to place a check in the “Local Activation”/”Allow” box
12. Click the “OK” button
13. Back in the “Security” tab, click the “Apply” button, then keep clicking “OK” until all windows are closed
14. Reboot
That is all great and works perfectly with all DCOM components that produce EventID 10016 errors (including the first two mentioned in the beginning of this post).

The only one that, at least in my installation, cannot be solved is the RuntimeBroker, which gives the following message

Pressing “Remove”, makes the Windows installation very unstable and creates numerous problems. Thus pressing Remove is out of the question.
By pressing “Cancel”, it displays only the recognized permission entries (ALL APPLICATION PACKAGES and SELF) in read-only view and doesn't allow to add the SYSTEM or any other user.

Besides, giving my view on the 10016 errors, I would like to ask, if there is a way, to avoid this message in the RuntimeBroker component (and I'm not asking for the very good PS script provided here!)

Hope that someone might benefit from the solution provided here, not that I reinvented the wheel, just avoided a few steps.
And I would definitely appreciate any help in the RuntimeBroker issue.

Dimitri

My ComputerYou need to have JavaScript enabled so that you can use this ...

There are numerous posts in TenForums and Microsoft forums on how to fix these errors.
All solutions provide instructions on how to change the owner of the CLSID & APPID registry keys to the Administrators group, in order to activate the security settings of the respective DCOM component, so you can provide the problematic user (usually NT AUTHORITY\SYSTEM) with Local Activation privileges.

Having spent quite some time in solving these 10016 errors, I have come up with the following solution:
1. In order to avoid all the steps to activate the DCOM component’s Security settings messing up with the registry, download the excellent utility PowerRun, with which you can run any program with TrustedInstaller privileges.
2. Once downloaded (there is no need for installation, it’s a standalone program) use either PowerRun_x64.exe or PowerRun.exe, depending on your Windows 10 (x64 or x86). From within the program, press the + icon and add the Component Services “%windir%\System32\DCOMcnfg.exe”.
3. Browse to Console Root > Component Services > Computers > My Computer > DCOM Config
4. Find the problematic component, searching either by its DCOM name or by its AppID
5. Right click on it and select “Properties”
6. Navigate to the “Security” tab and click the “Edit” button in the “Launch and Activation Permissions” section
7. In the newly opened dialogue box (Launch and Activation Permission), if “SYSTEM” is missing from the “Group or user names” list section, proceed to #8, otherwise skip to #11
8. Click the “Add” button
9. Type in “SYSTEM”, that is the User as found per Event ID 10016 from Event Viewer, and click on “Check Names” button (it will convert the name to the correct format)
10. Click the “OK” button. You're back in “Launch and Activation Permission” dialogue box
11. Select “SYSTEM” from the “Group or user names” list, and click to place a check in the “Local Activation”/”Allow” box
12. Click the “OK” button
13. Back in the “Security” tab, click the “Apply” button, then keep clicking “OK” until all windows are closed
14. Reboot
That is all great and works perfectly with all DCOM components that produce EventID 10016 errors (including the first two mentioned in the beginning of this post).

The only one that, at least in my installation, cannot be solved is the RuntimeBroker, which gives the following message

Pressing “Remove”, makes the Windows installation very unstable and creates numerous problems. Thus pressing Remove is out of the question.
By pressing “Cancel”, it displays only the recognized permission entries (ALL APPLICATION PACKAGES and SELF) in read-only view and doesn't allow to add the SYSTEM or any other user.

Besides, giving my view on the 10016 errors, I would like to ask, if there is a way, to avoid this message in the RuntimeBroker component (and I'm not asking for the very good PS script provided here!)

Hope that someone might benefit from the solution provided here, not that I reinvented the wheel, just avoided a few steps.
And I would definitely appreciate any help in the RuntimeBroker issue.

The Runtime Broker error, {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}, has not occurred for a while here in build 15063, or in several previous builds recently. The others have. I know it is a persistent error in the RTM AU, but seems to have cleared up in the builds leading to Creator's Update.

Just as an experiment, I went to Component Services (using that nifty app you posted!), and modified the security permissions to include Network Service local activation. As you mentioned, that warning came up, but I went ahead anyway and let it delete the unreferenced entries, then made my changes.

Cleared out all the event logs, shutdown, unplugged, drained the capacitors, and powered back up. No related errors logged in Event Viewer. Been 30 minutes now, and still no errors. Have banged around all over to see if anything broke. Nothing. This error seems to be cleared up now. Others may still see it for any number of reasons, but it seems to be ok for now.

Next couple of weeks, with the Creator's coming out, this may be a non-issue going forward. Suggest you wait it out until after you have upgraded, then if still persistent, go after it again.

Sorry for being long-winded. :) TC....

My ComputersYou need to have JavaScript enabled so that you can use this ...

The Runtime Broker error, {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}, has not occurred for a while here in build 15063, or in several previous builds recently. The others have. I know it is a persistent error in the RTM AU, but seems to have cleared up in the builds leading to Creator's Update.

Unfortunately it did crop up again on clean installs of Creators Update.

Cheers,

My ComputersYou need to have JavaScript enabled so that you can use this ...

Unfortunately it did crop up again on clean installs of Creators Update.

Cheers,

ddelo said:

Ooops!!!
Dick ( @f14tomcat ), I guess I'll wait for the Creator's Update, but according to our friend @fdegrove, it seems that we'll be discussing it again in the near future

It has not occurred here. I can't speak for any of the other thousands and thousands of Insiders. I'm sure if fdegrove said he got an error, he did. I don't know what else to say. It would be pointless.

My ComputersYou need to have JavaScript enabled so that you can use this ...

Since upgrading to Windows 10, my error log is flooded with this message. Over 520 incidents in the past week. The instructions provided for that error in Windows 8 do not work with 10, since it is impossible to grant full permission to the...

Hello,
Event Viewer is showing the following errors:
The User Data Storage_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
The User...

This appears to be a general issue with windows 10, I always get the following errors on shutdown:
The VMware Workstation Server service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000...

hi guys
managed to install windows 10 and everything seems to be working great. I looked in event viewer and I'm getting loads of errors, the same over and over.
one is that keeps coming up is kernel-power event id 137
The system...

On Windows 10 Pro x64 I am getting quite a few ESSENT errors in my Event Log after I start up W10. I see Event ID's 413, 455, 488, and 489. If these are indicative of a problem does anyone know the fix?
Thanks

About Us
Windows 10 Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows 10" and related materials are trademarks of Microsoft Corp.